Date: Sat, 18 Nov 2000 11:35:57 +1100 (Australia/ACT)
From: Darren Reed <avalon@coombs.anu.edu.au>
To: traviso@RapidNet.com (Travis {RapidSupport})
Cc: nuno.teixeira@pt-quorum.com (Nuno Teixeira), freebsd-security@FreeBSD.ORG
Subject: Re: Restarting Firewall ruleset
Message-ID: <200011180035.LAA15457@caligula.anu.edu.au>
In-Reply-To: <Pine.BSF.4.21.0011171622110.14024-100000@rapidnet.com> from "Travis {RapidSupport}" at Nov 17, 2000 04:23:44 PM
next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Travis {RapidSupport}, sie said:
>
> If you are running ipf then:
>
> ipf -F a && ipf -f /etc/firewalls/ipf.blah
No, you should do:
ipf -If /etc/firewalls/ipf.blah && ipf -s -IF a
load rules into alternative set, if successful then switch active sets
and flush the old rules. Doing this means there is no gap in which a
partial ruleset is loaded and active.
Darren
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200011180035.LAA15457>